MAL-2025-102252 Malicious code in estimated_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38467e3b6be96fc947b1c3bc80c9f8b59ea50f31f12c106652e944356cf796a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106761 Malicious code in optimistic_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ec59f09749b4ee986a9d7645d6cd561fad7eeaf4c8c562e1d414291f1fec51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108954 Malicious code in soviet_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2781d39dba221d2d33bbf0e4fef7affc8e012d21ef327daccc7f8731765a9bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100373 Malicious code in chemical_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3a0bde643d809f7d4496add9ca6bbfd63f5dc281adc6592914ae1668a1c605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106393 Malicious code in notable_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a32715a3ff4b90e4b89719705b8fedcd6fdd2cf3358b029b1edd70798235ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109542 Malicious code in tender_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2369511d3c38788d5b8d0e7429293de8ab81b2a30f4b70b7f1a3d0d26cc528ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228ba99cbcfbb08609f7d9678a25a3f6aed867966c3fb6c64363ae7e37b6df9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c93e588e4510a95994d6164588e6a7a4ea7d4f569f930c40f17863899bad878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_sparrow_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560b1600cf796b2b37619ddcbecc9e56e2607cbdb27bb93454f4b09eefb31f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_elk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394a13799393de669977d5f3c698b78aa2535df48572ffcc638178cfcd30f5b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gentle_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb56e967a9ae0f7e47c0d853a06cc5ddd33144c1996b539aa9b005c3972191f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest_thrush_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3831f7cd16c1cd3f5558e944c51d8f6bfacf7e7885b13be925105abfc52ba5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competitive_chimpanzee_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3e4331b9040be2a61617e5e04af19d46407add0cc3a4ce2c4bae3cc9036774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_parrot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0f7de4ac428e3360a387222141f3c14eab4885b3ef453be7c553a0b9cb0d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xeric_wildcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f242d938ea2d536a8cde291e2eace371bf347a81f321e4a2dc20de7209187d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101738 Malicious code in dorsey-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc59ff8200322e35413e0028ffced73e4ef5c9626a8f5745168f83d0009b8377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101809 Malicious code in dull_spider_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a000f848e05202f7e049cd7de6638cc918f580ec8d3720777b417e5e7107c011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110353 Malicious code in various_felidae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192db8248b5bd7ab85aa1d49fdd41e25e957a3e159235072e672ccddd0e542b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110972 Malicious code in wittering_mongoose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efaf9da09dc3ff060b87c6f8347b4a9c480272a02521713dce37954cfd6176d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107835 Malicious code in related_crocodile_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a978e4f308265813e88582f59677ab306565780f3af676d34537234ccfbf42da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...